You can tell Twitter (and the other techies) don't care about "security" when they force you to use SMS for 2FA when we all know they're doing that to harvest phone numbers because they're a pretty o.k. way to link identities.
It's not exclusive, though; you can switch to an authenticator like Authy or even a hardware device like Yubikey.